Ziad Mahmoud Ahmed Abdelgwad
a7a479141b
Comprehensive security audit of the Ghaymah CLI v2 and web platform. Findings: - [CRITICAL] T1552: Dockerfile & .env Credential Leakage - [CRITICAL] OWASP A07: Missing OTP & Unverified Password Change - [HIGH] T1539: Session Token Revocation Bypass - [MED/HIGH] CWE-400: Configuration Poisoning DoS (Pipeline Hang) Includes: - 8 Proof-of-Concept applications (PoC_Apps/) - Visual evidence & screenshots (Assets/Screenshots/) - Full PDF audit report (Reports/) - Mermaid.js attack flow diagrams in README Auditor: Ziad Mahmoud Ahmed Abdelgwad — Cybersecurity Specialist
34 أسطر
1.4 KiB
Plaintext
34 أسطر
1.4 KiB
Plaintext
# ============================================================================
|
|
# Ghaymah CLI v2 Audit — .gitignore
|
|
# ============================================================================
|
|
|
|
# ── CLI Binary (large / proprietary) ────────────────────────────────────────
|
|
gy-linux-amd64
|
|
|
|
# ── Windows Zone.Identifier metadata ────────────────────────────────────────
|
|
*.Zone.Identifier
|
|
*:Zone.Identifier
|
|
|
|
# ── Sensitive environment files ─────────────────────────────────────────────
|
|
.env
|
|
.env.*
|
|
!.env.example
|
|
|
|
# ── OS-generated files ──────────────────────────────────────────────────────
|
|
.DS_Store
|
|
Thumbs.db
|
|
Desktop.ini
|
|
|
|
# ── IDE / Editor files ──────────────────────────────────────────────────────
|
|
.vscode/
|
|
.idea/
|
|
*.swp
|
|
*.swo
|
|
*~
|
|
|
|
# ── Node / build artifacts ──────────────────────────────────────────────────
|
|
node_modules/
|
|
dist/
|
|
build/
|
|
*.log
|